SIEM+ Release Notes
Here are the main improvements in each SIEM+ version, explained in terms of what you can do and what you will notice.
1.0.5
Better analysis and alert data
- Build account-scoped user behavior profiles from DEVO authentication and Windows events with improved recovery and memory use.
- Refresh DEVO alerts every six hours with richer source data and MITRE classification details.
Easier automation and navigation
- Use clearer agent names, simpler schedule controls, and more reliable duplicate-run prevention.
- Sort nested accounts more clearly and improve mobile layouts across account and report pages.
- Rename Auditor View to Compliance.
Better editing and sign-in
- Edit and view case and report Markdown with a consistent multiline editor and preview.
- Return to the page you were viewing after signing in again when your session expires.
More dependable automation and notifications
- See in-app notifications for recent account activity, mark them as read, and automatically remove older notifications.
- Keep scheduled tasks in sync and recover overdue tasks automatically.
- Save account and agent changes more reliably.
More reliable integrations and reporting
- Continue collecting DEVO data more reliably during temporary service interruptions and preserve alert source details.
- Improve score and audit report generation and notification delivery.
1.0.4
More reliable report notifications
- Score and audit notifications generate fresh PDF attachments before sending email.
- Score notifications use the current score data directly, including manual runs.
- Notification subjects identify whether the attachment is a score or audit report.
- Audit report notifications run by default every Friday at 12:00 UTC.
Easier automation management
- Sort agents by name in either direction.
- Filter agents by keyword, including the
allkeyword to show every agent. - Switch between tile and list views on the Agents page.
1.0.3
Easier account and notification settings
- Open personal settings or sign out from the new user menu.
- Find parent accounts and sub-accounts more easily.
- Choose whether to receive report notifications and which language to use for them.
- Switch between multiple accounts more comfortably.
Smoother alert work
- Alerts can now be closed automatically when they meet the configured conditions.
- Alert information is clearer and more complete when details are available.
- Searching alerts by account and date is faster.
1.0.2
More useful automation
- Find and review related cases more easily.
- Manage which automated tasks are active from the Agents page.
- Prevent inactive tasks from being started by mistake.
- Review task history in a clearer format.
More dependable alert data
- Alert and system activity updates are faster and more reliable.
- SIEM+ can identify and recover from gaps in daily alert information.
- Interrupted updates resume more smoothly.
- Choose how long alerts should be kept and let SIEM+ clean up older alerts automatically.
- Refresh alerts for a specific date when you need to check or correct the data.
Better reports, cases, and scores
- Executive PDF reports are more consistent to generate and download.
- Manage report recipients, attachments, and notification preferences more easily.
- Review daily audit reports and compare results by date.
- Visualize, share, filter, and organize cases more easily.
- Move between dates and report versions from the score page.
- Edit and read remediation recommendations and implementation plans more comfortably.
1.0.1
More control over alerts and accounts
- Refresh alerts for a selected date.
- Set an alert retention period and remove older alerts automatically.
- See clearer messages when an account is not available to you.
- Use account time zones consistently for schedules and dates.
Improved reports and case management
- Choose report recipients, report types, languages, and email attachments.
- Create, share, filter, escalate, and close cases from SIEM+.
- Review daily audit reports and their history.
- View and edit remediation recommendations and implementation plans with clearer formatting.
Better visibility into security activity
- Schedule automated tasks and review their activity history.
- Monitor system activity and alert-processing trends.
- Review score history, report details, and data-quality information.